General

  • Target

    b33810de1ba7b0383c7d35006a1691a6c27480516d30bf2ec4cdd173171071a3

  • Size

    11.1MB

  • MD5

    604f557a561320764432a9a0feab44c0

  • SHA1

    66f3d11b2a7e5f08152db3090068ea1a5bfa7d65

  • SHA256

    b33810de1ba7b0383c7d35006a1691a6c27480516d30bf2ec4cdd173171071a3

  • SHA512

    7dc426154c1b0ba6116532f6f08a2058480a2d160f1d9f9db38b904161a9d91da7d3908407df0e58751d56629d248b7a9a4ed9e7b0214494233ca37490309f00

  • SSDEEP

    196608:IuhQ3XK2lP2vIW3pThofIdQW1BwZkurErvI9pWjgaAnajMsbSEo2rGN6nzC+dMzr:jhLqP2vdlSnkurEUWjJjIfGGNmytKjxs

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b33810de1ba7b0383c7d35006a1691a6c27480516d30bf2ec4cdd173171071a3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • loader-o.pyc